---

id: "GV.SC-07" title: "Supply Chain Risk Management" function: "GV" function_name: "Govern" category: "GV.SC" category_name: "Supply Chain Risk Management" description: "Supply chain security incidents are reported and managed." controls: - IR-1 - IR-4 - IR-5 - IR-6 - IR-7 - SA-1 - SR-1 - SR-2

---

GV.SC-07: Supply Chain Risk Management

Description

Supply chain security incidents are reported and managed.

Category Context

Function: GV — Govern Category: GV.SC — Supply Chain Risk Management

Cybersecurity supply chain risk management processes are established and implemented.

Mapped SP 800-53 Controls

• IR-1 (Incident Response) — View Control
• IR-4 (Incident Response) — View Control
• IR-5 (Incident Response) — View Control
• IR-6 (Incident Response) — View Control
• IR-7 (Incident Response) — View Control
• SA-1 (System and Services Acquisition) — View Control
• SR-1 (Supply Chain Risk Management) — View Control
• SR-2 (Supply Chain Risk Management) — View Control